Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634343a3a2f34362d3436203d3e20323134363433.roa
File:                     326131343a373538313a6634343a3a2f34362d3436203d3e20323134363433.roa (raw, json)
Hash identifier:          DHMo+HoD2IBPD0jcE5wNevnxR7Mge/nxxuYWze55UIc=
Subject key identifier:   A9:84:D6:1D:11:8F:C5:A7:89:74:0F:29:F6:C8:E5:D1:3E:FD:B1:39
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       4E9B74E76D387163759E703DCC287B7657B0F468
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634343a3a2f34362d3436203d3e20323134363433.roa
Signing time:             Sat 06 Jul 2024 23:41:59 +0000
ROA not before:           Sat 06 Jul 2024 23:36:59 +0000
ROA not after:            Sat 05 Jul 2025 23:41:59 +0000
asID:                     214643
IP address blocks:        2a14:7581:f44::/46 maxlen: 46

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 15:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9b:74:e7:6d:38:71:63:75:9e:70:3d:cc:28:7b:76:57:b0:f4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Jul  6 23:36:59 2024 GMT
            Not After : Jul  5 23:41:59 2025 GMT
        Subject: CN=A984D61D118FC5A789740F29F6C8E5D13EFDB139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:79:16:b6:56:5a:94:a6:46:f4:ad:1e:92:
                    98:68:fc:65:ae:b9:2e:0f:2f:08:88:7d:bd:5c:f7:
                    06:cf:3d:64:45:4f:79:c7:fd:64:48:93:36:7c:b9:
                    f1:26:3f:56:a5:3f:38:82:e9:7f:8f:b2:3a:3a:af:
                    d3:bc:be:25:6a:66:28:44:23:ba:2a:a5:90:a9:1e:
                    4e:c1:a2:fc:cf:e2:86:08:cc:d9:dc:ae:b6:0d:7b:
                    73:f1:3d:a7:94:87:00:8d:02:b8:1c:96:67:ed:9b:
                    ce:b4:cf:48:f1:ee:c1:f4:4e:ad:67:13:99:14:d0:
                    1d:e7:9d:9f:3b:ed:17:c6:29:16:ad:38:ef:1f:6e:
                    37:de:79:39:c5:ca:f4:cb:5e:e2:ca:bc:25:a1:a0:
                    f3:b3:77:f8:b2:22:f1:9b:b9:d4:96:66:d3:50:d7:
                    90:4c:1c:ee:10:60:c9:e0:c8:a5:cd:6b:87:86:7d:
                    f3:16:8e:e4:13:dc:6a:cb:b9:45:19:d8:ee:35:62:
                    3b:b9:88:77:c1:ec:8a:25:6f:51:28:7d:a0:a1:19:
                    bb:fa:8f:a1:90:4c:51:7e:35:4b:79:96:c1:6c:40:
                    6f:ae:6e:4c:da:81:78:e7:d8:76:27:c5:de:20:df:
                    c5:be:74:54:32:16:10:c4:8f:1c:07:d3:45:92:5d:
                    33:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:84:D6:1D:11:8F:C5:A7:89:74:0F:29:F6:C8:E5:D1:3E:FD:B1:39
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634343a3a2f34362d3436203d3e20323134363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:f44::/46

    Signature Algorithm: sha256WithRSAEncryption
         2a:9d:fa:ab:35:e7:15:0e:89:90:6b:42:74:6c:20:78:31:0f:
         fd:9b:ef:bf:43:bc:b6:d8:42:19:bf:f4:ad:e4:7c:1b:d1:7e:
         01:20:e5:a8:d9:d7:8c:2f:99:8f:75:81:eb:2b:3b:b1:00:d3:
         7e:71:7d:d9:fd:52:4d:c3:af:e5:34:79:0f:ab:e8:04:8d:86:
         f0:4b:e9:81:24:cf:6c:12:95:75:47:af:92:0e:66:12:22:c0:
         b7:32:12:90:f2:c6:e7:4e:66:0d:a8:80:7e:96:2b:ba:1a:95:
         df:4e:4f:df:91:9d:de:03:08:9b:8a:78:f6:88:4a:f6:f7:14:
         42:df:ca:97:8d:8a:27:82:e2:39:a4:38:0f:07:be:41:91:66:
         a6:d1:28:ce:83:1f:cc:c8:a5:53:4b:80:82:8e:4d:6c:cc:37:
         11:99:19:dd:23:ed:95:02:6c:65:80:f2:76:41:3c:d0:44:d7:
         8b:8f:53:81:ee:a8:d1:a4:98:18:3f:08:d2:be:38:ff:ee:45:
         92:0b:9b:43:9b:90:f0:ae:aa:11:71:1b:d3:8c:cd:d9:46:a4:
         8d:15:ee:2e:cf:77:fa:68:5f:74:4a:80:e3:88:3f:55:96:61:
         14:98:21:77:b6:56:85:8c:7d:61:2b:12:43:4f:9b:06:39:f3:
         aa:7a:b7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----